Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
File:                     acc8e6df-2fca-392e-9a4f-c03d516656d6.roa (raw, json)
Hash identifier:          p7V0pkxk3d1nMlIXTlb62KEpukRYme1HbguLOH0y3yk=
Subject key identifier:   81:9E:6C:3D:DB:DA:07:67:FC:1C:8E:4B:3C:B3:44:F4:A4:1B:80:86
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584548FBEB40552C1546D0048900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa
Signing time:             Thu 21 Mar 2024 21:11:52 +0000
ROA not before:           Thu 21 Mar 2024 21:11:52 +0000
ROA not after:            Wed 19 Jun 2024 21:11:52 +0000
asID:                     36492
IP address blocks:        64.9.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:fb:eb:40:55:2c:15:46:d0:04:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Mar 21 21:11:52 2024 GMT
            Not After : Jun 19 21:11:52 2024 GMT
        Subject: CN=a4aabb29-69a3-4a7e-895b-9838934547a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:ef:35:13:6f:e9:b2:13:c1:10:f4:1e:86:
                    b7:6e:d0:64:d8:09:3f:35:ce:05:60:9f:d6:32:cc:
                    08:46:38:aa:1b:46:a9:c2:58:d4:2e:a2:c7:5a:c5:
                    54:2a:bb:8d:9f:22:75:06:b9:03:e4:e6:6a:df:9e:
                    61:99:e0:33:1a:fc:41:35:4d:4a:41:76:68:1a:a3:
                    55:5c:b4:81:30:b2:ba:d3:47:df:aa:49:30:eb:83:
                    18:a5:ee:5f:a0:64:ba:0d:3c:5e:91:07:1a:83:2f:
                    02:40:c0:01:29:f7:28:83:a0:95:dd:34:69:02:23:
                    56:68:1f:79:66:4c:ce:96:a8:9b:5f:68:cd:29:fb:
                    88:7f:25:f1:35:3f:44:d0:a4:b3:4d:44:99:04:e6:
                    5b:52:b6:3f:a6:c6:a6:9f:46:4d:d2:ef:da:ef:1f:
                    0c:9e:27:39:13:4b:3e:b9:33:c5:e5:91:1d:3b:c6:
                    97:f6:0a:a5:ec:ae:5f:b3:7f:6b:56:ef:2e:9b:4c:
                    6d:9e:a7:1e:6b:71:5c:b8:f1:88:e8:f4:3a:05:63:
                    5b:4c:6d:c5:d2:44:91:f2:5b:3c:ce:8b:c0:88:1c:
                    57:94:2e:fb:57:de:a0:54:29:c6:14:16:14:5b:b4:
                    f4:bd:dd:16:69:18:14:85:f3:27:2b:af:f2:08:bb:
                    3b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:6C:3D:DB:DA:07:67:FC:1C:8E:4B:3C:B3:44:F4:A4:1B:80:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/acc8e6df-2fca-392e-9a4f-c03d516656d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:fe:4c:f7:13:79:c8:65:d5:37:07:db:82:2c:34:eb:a2:48:
         5c:05:74:54:3c:f5:cf:d6:5b:ba:8c:db:35:26:2a:71:34:5f:
         51:c7:02:9f:02:a5:ef:84:da:b7:78:61:9a:20:16:f8:8f:ac:
         5e:b6:b2:7b:96:b1:79:74:24:cf:f0:e9:e0:3e:bd:f2:29:4b:
         de:62:0f:7d:2a:25:90:87:69:c9:8a:d1:25:9f:7c:ea:e0:57:
         8d:28:2b:05:bd:8a:01:1e:11:a0:a4:b2:81:06:19:95:04:48:
         87:b6:f7:47:63:28:80:de:ac:87:b3:57:1e:2d:0f:e9:03:37:
         64:d4:3f:f8:f4:2a:d8:e8:71:94:6d:9b:11:a8:88:5b:83:8e:
         37:53:9f:00:fe:b8:f6:2c:e4:d2:62:e7:b6:2b:ee:e7:59:42:
         5b:39:d6:e2:47:e2:eb:f5:ab:91:92:5f:1d:5e:af:d3:df:a3:
         23:6c:1f:a6:88:b0:06:79:de:21:03:82:e7:d9:aa:85:39:e5:
         5a:14:40:69:ba:ab:6a:c4:52:0b:49:c0:55:f8:74:37:8e:fb:
         7c:7b:06:08:3a:07:85:78:06:68:16:61:84:a2:ce:d7:f7:b1:
         0e:8f:d0:0c:5e:9b:4b:e7:99:3c:40:f1:81:81:17:41:97:64:
         c6:31:7d:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVI++tAVSwVRtAEiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI0MDMyMTIxMTE1MloXDTI0MDYxOTIxMTE1MlowLzEtMCsGA1UEAxMk
YTRhYWJiMjktNjlhMy00YTdlLTg5NWItOTgzODkzNDU0N2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8HvNRNv6bITwRD0Hoa3btBk2Ak/Nc4FYJ/W
MswIRjiqG0apwljULqLHWsVUKruNnyJ1BrkD5OZq355hmeAzGvxBNU1KQXZoGqNV
XLSBMLK600ffqkkw64MYpe5foGS6DTxekQcagy8CQMABKfcog6CV3TRpAiNWaB95
ZkzOlqibX2jNKfuIfyXxNT9E0KSzTUSZBOZbUrY/psamn0ZN0u/a7x8Mnic5E0s+
uTPF5ZEdO8aX9gql7K5fs39rVu8um0xtnqcea3FcuPGI6PQ6BWNbTG3F0kSR8ls8
zovAiBxXlC77V96gVCnGFBYUW7T0vd0WaRgUhfMnK6/yCLs7BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIGebD3b2gdn/ByOSzyzRPSkG4CGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYWNjOGU2ZGYtMmZjYS0z
OTJlLTlhNGYtYzAzZDUxNjY1NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKX+TPcTechl1TcH24IsNOuiSFwFdFQ89c/WW7qM2zUmKnE0X1HHAp8C
pe+E2rd4YZogFviPrF62snuWsXl0JM/w6eA+vfIpS95iD30qJZCHacmK0SWffOrg
V40oKwW9igEeEaCksoEGGZUESIe290djKIDerIezVx4tD+kDN2TUP/j0KtjocZRt
mxGoiFuDjjdTnwD+uPYs5NJi57Yr7udZQls51uJH4uv1q5GSXx1er9PfoyNsH6aI
sAZ53iEDgufZqoU55VoUQGm6q2rEUgtJwFX4dDeO+3x7Bgg6B4V4BmgWYYSiztf3
sQ6P0Axem0vnmTxA8YGBF0GXZMYxfcM=
-----END CERTIFICATE-----
Generated at Thu May 2 08:04:37 2024 by rpki-client on console-ams.rpki-client.org